A researcher says three patched OpenClaw flaws could enable credential theft, privilege escalation, and host code execution via WhatsApp.
  • mlfhAEnglish
    3·
    2 days ago

    I think the existence of a chain linking arbitrary whatsapp input to arbitrary host code execution using a fucking LLM as the intermediary is the real flaw here, not just the wonky openclaw guardrails…